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CLAIMS 


1\ An X.509 certificate capable of supporting more than one cryptographic algorithm, comprising: 

a signkure algorithm and signature for all authenticated attributes using a first cryptographic 
algorithm; \ 

an alternative public \^y extension for identifying at least one alternative cryptographic 
algorithm and providing its assocnh^d public key; and 

an alternative signature extension for coWning a signature for the alternative cryptographic 
algorithm. \ 

2. An X.509 certificate according to Claim 1 , wherein the tfrst cryptographic algorithm is RSA 
and the alternative cryptographic algorithm is elliptic curve. \ 

3 . An X. 509 certificate according to Claim 1 , wherein the certificate can be verified by either the 
signature for the first cryptographic algorithm or the signature for the alternative signaWe algorithm. 
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